From f09f5a690bd20b3903a40bf015f61bc016eb5c7b Mon Sep 17 00:00:00 2001
From: Henrik Widlund <4659350+henrikwidlund@users.noreply.github.com>
Date: Thu, 23 Jul 2026 18:31:48 +0200
Subject: [PATCH 1/2] Add pip to dependabot

---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 7b8a83e..4a7341f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,5 +1,12 @@
 version: 2
 updates:
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: "daily"
+    cooldown:
+      default-days: 14
+
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

From e82d227801d5a3dcf5cf222863c701638976ac9b Mon Sep 17 00:00:00 2001
From: Henrik Widlund <4659350+henrikwidlund@users.noreply.github.com>
Date: Thu, 23 Jul 2026 19:52:12 +0200
Subject: [PATCH 2/2] Don't perist github token

---
 .github/workflows/build.yml               | 2 ++
 .github/workflows/python-code-format.yml  | 2 ++
 .github/workflows/python-publish-pypi.yml | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index dace415..b35a2a8 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,6 +26,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
 
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
diff --git a/.github/workflows/python-code-format.yml b/.github/workflows/python-code-format.yml
index d6bd931..9ef91e3 100644
--- a/.github/workflows/python-code-format.yml
+++ b/.github/workflows/python-code-format.yml
@@ -28,6 +28,8 @@ jobs:
     name: Check Python code formatting
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
 
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
diff --git a/.github/workflows/python-publish-pypi.yml b/.github/workflows/python-publish-pypi.yml
index 7dca3e4..fa049cf 100644
--- a/.github/workflows/python-publish-pypi.yml
+++ b/.github/workflows/python-publish-pypi.yml
@@ -14,6 +14,8 @@ jobs:
     name: Verify Python build context
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Set up Python
         uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with: